@polkadot-api/ink-contracts
35
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
volivajosepot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): voliva is an established publisher (85 approved packages) explicitly named as author in package.json, publishing via attested CI/CD pipeline within the polkadot-api monorepo. Legitimate maintainer transition. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy is explained by the maintainer transition; SLSA provenance attestation confirms the publish came from the official CI/CD pipeline, ruling out account takeover. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped ecosystem package in a large monorepo; sparse README and missing keywords are cosmetic, not indicative of spam or malice. | ai |
Versions (showing 35 of 35)
| Version | Deps | Published |
|---|---|---|
| 0.6.3 | 3 / 0 | |
| 0.6.2 | 3 / 0 | |
| 0.6.1 | 3 / 0 | |
| 0.6.0 | 3 / 0 | |
| 0.5.1 | 3 / 0 | |
| 0.5.0 | 3 / 0 | |
| 0.4.6 | 3 / 0 | |
| 0.4.5 | 3 / 0 | |
| 0.4.4 | 3 / 0 | |
| 0.4.3 | 3 / 0 | |
| 0.4.2 | 3 / 0 | |
| 0.4.1 | 3 / 0 | |
| 0.4.0 | 3 / 0 | |
| 0.3.11 | 3 / 0 | |
| 0.3.10 | 3 / 0 | |
| 0.3.9 | 3 / 0 | |
| 0.3.8 | 3 / 0 | |
| 0.3.7 | 3 / 0 | |
| 0.3.6 | 3 / 0 | |
| 0.3.5 | 3 / 0 | |
| 0.3.4 | 3 / 0 | |
| 0.3.3 | 3 / 0 | |
| 0.3.2 | 3 / 0 | |
| 0.3.1 | 3 / 0 | |
| 0.3.0 | 3 / 0 | |
| 0.2.6 | 3 / 0 | |
| 0.2.5 | 4 / 0 | |
| 0.2.4 | 4 / 0 | |
| 0.2.3 | 4 / 0 | |
| 0.2.2 | 4 / 0 | |
| 0.2.1 | 4 / 0 | |
| 0.2.0 | 4 / 0 | |
| 0.1.2 | 4 / 0 | |
| 0.1.1 | 4 / 0 | |
| 0.1.0 | 4 / 0 |